CVE-2026-25436: WordPress Royal Elementor Addons plugin < 1.7.1053 - Broken Access Control vulnerability
Published May 7, 2026
·Updated
Missing Authorization vulnerability in WProyal Royal Elementor Addons allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects Royal Elementor Addons: from n/a before 1.7.1053.
Affected Software
1 affected component
WProyal Royal Elementor Addons<1.7.1053
Remediation
Information
Update the WordPress Royal Elementor Addons Plugin to the latest available version (at least 1.7.1053).
Event History
May 7, 2026
CVE Published
via MITRE·07:34 AM
Data Sourced
via MITRE·07:34 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·09:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-25436?
CVE-2026-25436 is classified as a medium severity vulnerability due to its impact on access controls.
2
How do I fix CVE-2026-25436?
To fix CVE-2026-25436, update the Royal Elementor Addons plugin to version 1.7.1053 or higher.
3
What type of vulnerability is CVE-2026-25436?
CVE-2026-25436 is a Broken Access Control vulnerability that allows unauthorized actions due to misconfigured access levels.
4
What are the potential impacts of CVE-2026-25436?
The potential impacts of CVE-2026-25436 include unauthorized access to restricted features and data within the Royal Elementor Addons.
5
Which versions of Royal Elementor Addons are affected by CVE-2026-25436?
CVE-2026-25436 affects all versions of Royal Elementor Addons prior to 1.7.1053.